ba78141ac5
Previously a DOCX citation only showed the extracted snippet + a Download button (Risk #3: never render a user-supplied .docx inline). Add a faithful inline render that keeps that guarantee: - New PreviewDocxView renders the .docx with docx-preview into an off-screen element, then injects DOMPurify-sanitized HTML into the live DOM (keeping <style> for docx-preview's scoped layout CSS). Script tags, event handlers and javascript: URLs are stripped, so a malicious .docx can't execute in the app origin. - preview-store now fetches the raw bytes for docx and exposes them via previewBlob, but deliberately keeps previewBlobUrl = null — no object URL is created, so the 'open raw original inline' path stays disabled (Risk #3) and Download remains the only raw-file path. - preview-panel routes docx -> PreviewDocxView when a blob is present, falling back to the text-view snippet otherwise. isInlineBlobAllowed still returns false for docx, so html/unknown behaviour is unchanged. - Deps: docx-preview + dompurify added to package.json. - Tests updated: docx now asserts bytes-fetched-without-object-URL. Not build/UI-verified in this environment (deps not installed here); needs bun install + browser check.
117 lines
3.6 KiB
JSON
117 lines
3.6 KiB
JSON
{
|
|
"name": "unsloth-theme",
|
|
"private": true,
|
|
"version": "0.0.0",
|
|
"type": "module",
|
|
"engines": {
|
|
"node": "^20.19.0 || >=22.12.0"
|
|
},
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"lint": "eslint .",
|
|
"preview": "vite preview",
|
|
"typecheck": "tsc -b --pretty false",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"i18n:check": "node --experimental-strip-types --no-warnings src/i18n/check-parity.ts",
|
|
"biome:check": "biome check",
|
|
"biome:fix": "biome check --write"
|
|
},
|
|
"dependencies": {
|
|
"@assistant-ui/core": "0.1.17",
|
|
"@assistant-ui/react": "0.12.28",
|
|
"@assistant-ui/tap": "0.5.10",
|
|
"@base-ui/react": "^1.2.0",
|
|
"@dagrejs/dagre": "^2.0.4",
|
|
"@dagrejs/graphlib": "^3.0.4",
|
|
"@fontsource-variable/figtree": "^5.2.10",
|
|
"@fontsource-variable/inter": "^5.2.8",
|
|
"@fontsource-variable/space-grotesk": "^5.2.10",
|
|
"@hugeicons/core-free-icons": "^4.1.1",
|
|
"@hugeicons/react": "^1.1.5",
|
|
"@huggingface/hub": "^2.9.0",
|
|
"@radix-ui/react-checkbox": "^1.3.3",
|
|
"@radix-ui/react-label": "^2.1.8",
|
|
"@radix-ui/react-select": "^2.2.6",
|
|
"@radix-ui/react-separator": "^1.1.8",
|
|
"@radix-ui/react-slot": "^1.2.4",
|
|
"@streamdown/code": "1.1.1",
|
|
"@streamdown/math": "1.0.2",
|
|
"@streamdown/mermaid": "1.0.2",
|
|
"@tailwindcss/vite": "^4.2.2",
|
|
"@tanstack/react-router": "1.169.2",
|
|
"@tanstack/react-table": "^8.21.3",
|
|
"@tauri-apps/api": "^2.10.1",
|
|
"@tauri-apps/plugin-clipboard-manager": "^2.3.2",
|
|
"@tauri-apps/plugin-notification": "^2.3.3",
|
|
"@tauri-apps/plugin-opener": "^2.5.3",
|
|
"@tauri-apps/plugin-process": "^2.3.1",
|
|
"@tauri-apps/plugin-updater": "^2.10.1",
|
|
"@toolwind/corner-shape": "^0.0.8-3",
|
|
"@types/event-source-polyfill": "1.0.5",
|
|
"@xyflow/react": "^12.10.0",
|
|
"assistant-stream": "0.3.12",
|
|
"canvas-confetti": "^1.9.4",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"dexie": "^4.3.0",
|
|
"docx-preview": "^0.3.6",
|
|
"dompurify": "^3.2.7",
|
|
"event-source-polyfill": "1.0.31",
|
|
"fflate": "0.8.3",
|
|
"js-yaml": "^4.1.1",
|
|
"katex": "^0.16.28",
|
|
"lucide-react": "^1.7.0",
|
|
"mammoth": "^1.11.0",
|
|
"motion": "^12.34.0",
|
|
"next-themes": "^0.4.6",
|
|
"node-forge": "^1.4.0",
|
|
"radix-ui": "^1.4.3",
|
|
"react": "^19.2.4",
|
|
"react-day-picker": "^9.13.2",
|
|
"react-dom": "^19.2.4",
|
|
"react-pdf": "^10.4.1",
|
|
"react-resizable-panels": "^4.6.4",
|
|
"recharts": "3.7.0",
|
|
"shadcn": "^4.2.0",
|
|
"sonner": "^2.0.7",
|
|
"streamdown": "2.5.0",
|
|
"tailwind-merge": "^3.4.0",
|
|
"tailwindcss": "^4.1.18",
|
|
"tw-animate-css": "^1.4.0",
|
|
"tw-shimmer": "^0.4.6",
|
|
"unpdf": "^1.4.0",
|
|
"zustand": "^5.0.11"
|
|
},
|
|
"overrides": {
|
|
"@tanstack/react-router": "1.169.2",
|
|
"@tanstack/router-core": "1.169.2",
|
|
"@tanstack/history": "1.161.6"
|
|
},
|
|
"devDependencies": {
|
|
"@biomejs/biome": "^1.9.4",
|
|
"@eslint/js": "^9.39.1",
|
|
"@testing-library/dom": "^10.4.1",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@testing-library/user-event": "^14.6.1",
|
|
"@types/canvas-confetti": "^1.9.0",
|
|
"@types/js-yaml": "^4.0.9",
|
|
"@types/node": "^25.5.2",
|
|
"@types/node-forge": "^1.3.14",
|
|
"@types/react": "^19.2.5",
|
|
"@types/react-dom": "^19.2.3",
|
|
"@vitejs/plugin-react": "^6.0.1",
|
|
"eslint": "^9.39.1",
|
|
"eslint-plugin-react-hooks": "^7.0.1",
|
|
"eslint-plugin-react-refresh": "^0.5.2",
|
|
"globals": "^17.4.0",
|
|
"jsdom": "^29.1.1",
|
|
"typescript": "~5.9.3",
|
|
"typescript-eslint": "^8.55.0",
|
|
"vite": "^8.0.1",
|
|
"vitest": "^4.1.7"
|
|
}
|
|
}
|